allow runas_app self:perf_event { open read write kernel }; r_dir_file(runas_app, platform_app) allow runas_app platform_app:process { ptrace signal sigstop }; allow runas_app platform_app:unix_stream_socket connectto;